FROM node:22-alpine
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev
COPY server.js ./
COPY public/ ./public/
RUN mkdir -p /app/data && chgrp -R 0 /app && chmod -R g=u /app
ENV DATA_DIR=/app/data
EXPOSE 3333
USER 1001
CMD ["node", "server.js"]